Wiring CAI into OpenClaw, Hermes, Codex, and Cursor: the exact MCP config for each host

The general install is one command, npm i -g @cailab/mcp

, and the contract lives at cai.com/skill.md

. This post is the host-specific deep-dive: the exact config block for OpenClaw, Hermes, Codex, and Cursor, with the path to the config file, the env var handling, and the restart command.

You need:

cai.com/app

). The signup is four steps, about 2 minutes.pay

when you need transfers.npm i -g @cailab/mcp

).OpenClaw's MCP config lives at ~/.openclaw/mcp.json

. Add the CAI server to the mcpServers

object:

{
  "mcpServers": {
    "cai": {
      "command": "cai-mcp",
      "env": {
        "CAI_API_KEY": "your-api-key-from-the-dashboard"
      }
    }
  }
}

Restart OpenClaw. The CAI tools appear in the agent's tool surface. Verify with openclaw mcp list

. The cai

server should show as running.

If the server doesn't appear: check the cai-mcp

binary is on the PATH (which cai-mcp

). If the binary is missing, re-run the install. If the binary is on the PATH but the server still doesn't start, check the API key is valid with curl -H "Authorization: Bearer ***" https://api.cai.com/functions/v1/get-identity

.

Hermes uses a CLI to add MCP servers:

hermes mcp add cai -- cai-mcp
hermes mcp env-set cai CAI_API_KEY=your-api-key-from-the-dashboard

The env var is stored in the Hermes MCP config. Restart Hermes with hermes restart

. Verify with hermes mcp list

. The cai

server should show as running with the env var set.

Hermes-specific note: Hermes reads MCP env vars at startup, not at request time. If you rotate your CAI API key, you need to update the env var and restart Hermes.

Codex reads MCP config from ~/.codex/mcp_servers.json

. The format is the standard MCP config:

{
  "mcpServers": {
    "cai": {
      "command": "cai-mcp",
      "env": {
        "CAI_API_KEY": "your-api-key-from-the-dashboard"
      }
    }
  }
}

Restart Codex. The CAI tools appear in the agent's tool surface. Verify by running a test request. codex mcp test cai

should return a successful handshake.

Codex-specific note: Codex's MCP support is newer than OpenClaw's. If you see "MCP server not found" on startup, check the Codex version is up to date. The CAI MCP server requires Codex ≥ 0.x.y (the specific version is in cai.com/developers.html

).

Cursor's MCP settings are in the UI: Cursor → Settings → MCP → Add new MCP server

. The form fields:

cai

cai-mcp

CAI_API_KEY=your-api-key-from-the-dashboard

Click "Add" and Cursor restarts the MCP server. The CAI tools appear in the agent's tool surface. Verify with Cursor → Settings → MCP → cai → Test

. The test should return a successful handshake.

Cursor-specific note: Cursor stores the env var in its own keychain, not in a config file. If you rotate your CAI API key, update the env var in the MCP settings UI and click "Save."

If the host isn't on the list, the config is the same shape:

{
  "mcpServers": {
    "cai": {
      "command": "cai-mcp",
      "env": {
        "CAI_API_KEY": "your-api-key-from-the-dashboard"
      }
    }
  }
}

The MCP server is generic. The contract is in cai.com/skill.md

. The tool names are stable. Any host that supports MCP can use the server.

Once the server is running in your host, run a quick test:

get_identity

should return your @cai.com

address, your wallet bindings, and your linked subwallets.get_wallet_balances

should return your balances (or an empty list with a gap_id

if you haven't deposited yet).wallet_custodial_transfer

with a tiny amount (0.01 USDC) should return a hosted-action URL. Open the URL, tap once, and the transfer completes.A few things to keep in mind about the wallet. There is a $200/day auto-limit while the security audit completes. New recipients and new devices always require confirmation. Think of it like cash in your pocket. It works for daily spending without exposing a private key in chat. The vault product (multi-sig, time-locks) is coming for larger balances.

The part of CAI that the user sees most often is the hosted-action flow. When the agent calls wallet_custodial_transfer

, the API returns a hosted-action URL. The user opens it, confirms with one tap, and the payment goes through. The agent polls GET /transfer-status

for the receipt. No private key in chat, no signature to copy, no browser extension to connect. That single-tap confirmation page is the user's control point for every agent-initiated payment.

If any step fails, the comment section below is the right place to file the bug.

The contract is cai.com/skill.md

. The install command is npm i -g @cailab/mcp

. The dashboard is at cai.com/app

.

Comment below with:

Every comment on this article gets read. Bug reports will be replied to within 24 hours. Friction points shape what we document next.

Documentation: cai.com/skill.md

· cai.com/developers.html

· cai.com/app

to sign up.